[ubuntu-cloud-archive/stein-proposed] ceph (Accepted)

Corey Bryant corey.bryant at canonical.com
Wed Jun 26 13:05:14 UTC 2019


 ceph (13.2.4+dfsg1-0ubuntu2.1~cloud0) bionic-stein; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 ceph (13.2.4+dfsg1-0ubuntu2.1) disco-security; urgency=medium
 .
   * SECURITY UPDATE: encryption key leak in log
     - debian/patches/CVE-2018-16889.patch: sanitize customer encryption
       keys from log output in src/rgw/rgw_auth_s3.cc,
       src/rgw/rgw_rest_s3.cc.
     - CVE-2018-16889
   * SECURITY UPDATE: civetweb file descriptor leak
     - debian/patches/CVE-2019-3821.patch: properly close connection in
       src/civetweb/src/civetweb.c.
     - CVE-2019-3821

Date: Tue, 25 Jun 2019 12:21:25 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: Corey Bryant <corey.bryant at canonical.com>


More information about the Cloud-archive-changes mailing list